Public by default

An open project should be open to read: its code, its decisions and its progress. So everything is public unless there is a reason it cannot be, and the few private things are named as such.

The user’s decision A of 2026-10-21 (GITHUB DECISIONS): public by default.

• Repositories, records and progress are public unless they must be private (credentials are never in a record at all: D-09).
• The organization’s plan is fixed by the user (GH-U, U-1); a GitHub feature the plan does not include is recorded as unavailable, never assumed.

How it is enforced: it governs where work goes. The public secret gate (.github/workflows/secret-scan.yml) keeps private material out of the public tree; nothing yet decides a new repository’s visibility from a declared rule.